CVE-2016-10108
CRITICAL EXPLOITED NUCLEIWestern Digital MyCloud unauthenticated command injection
Title source: metasploitExploitation Summary
CVE-2016-10108 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 1 public exploit from researchers including Erik Wynter, Steven Campbell, Remco Vermeulen, including a Metasploit module exploits/linux/http/wd_mycloud_unauthenticated_cmd_injection.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits an authentication bypass (CVE-2018-17153) and command injection (CVE-2016-10108) in Western Digital MyCloud to achieve unauthenticated remote code execution as root. It first checks for vulnerability by executing an echo command and then delivers the payload if the target is vulnerable.
Description
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
Exploits (1)
This Metasploit module exploits an authentication bypass (CVE-2018-17153) and command injection (CVE-2016-10108) in Western Digital MyCloud to achieve unauthenticated remote code execution as root. It first checks for vulnerability by executing an echo command and then delivers the payload if the target is vulnerable.
Nuclei Templates (1)
http.favicon.hash:-1074357885
icon_hash=-1074357885
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H